General

  • Target

    50a91001c57faaaab8457777144b685b_JaffaCakes118

  • Size

    14.5MB

  • MD5

    50a91001c57faaaab8457777144b685b

  • SHA1

    b8beaea5964404f806a00c8854e7294c3c332272

  • SHA256

    7a28f2517e7bcaedc7ea44e472ffc0e4d1f0ea2cdffe0e216dc4637cf2b6bd6a

  • SHA512

    5f0f3f7bf80a4074be13ebbe66045f0a9b247515fbbbabcdced8af2a891af89e797275e3580f40397f4db3236aea55f5efb09d0316c69794f00c5f9bb0aeb023

  • SSDEEP

    393216:yI+9odWW7K33IvHpmXDYCn9Z6HWVnwH8X+MIsB/:yDodWWe3IvJc7Z6HW6K+M

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 50a91001c57faaaab8457777144b685b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9bca2c7cb3bba360100a3a7a510fe11d


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/EstUrl.dll
    .dll windows:4 windows x86 arch:x86

    eeb38f232fa753bbd4952f6a14cefac5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    34e265a7f45a5a54be208d4166ec2423


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    88d8a4a9c21e345682f6b1fac45c4679


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    f9dfb8ff6a049e4feb3afa5b7a47b099


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsWeb2.dll
    .dll windows:4 windows x86 arch:x86

    082c20552519a39cb8a90624898536df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/stext/estci_l.bmp
  • $PLUGINSDIR/workerExtension.dll
    .dll windows:4 windows x86 arch:x86

    e4781cfad6de451d1604134f6718d380


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/zumlib.dll
    .dll windows:5 windows x86 arch:x86

    6e21ecf5c7fd20210740626c966c0125


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/ESTsoft/ALUpdate/$R6
    .exe windows:5 windows x86 arch:x86

    bd7dbcc8c07b8d3a5ed549bf070cb152


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/ESTsoft/Common/ezt.exe
    .exe windows:5 windows x86 arch:x86

    bd7dbcc8c07b8d3a5ed549bf070cb152


    Code Sign

    Headers

    Imports

    Sections

  • $R6
    .exe windows:5 windows x86 arch:x86

    1ad7e2fa5f9048e8ccdf2f7d4ab61e53


    Code Sign

    Headers

    Imports

    Exports

    Sections